strange php/mysql error

[SetToLoki]

[code=php:0]
$username = trim($_POST['username']);
$password = md5($_POST['password']);

$query = "select username, userlevel from users where users.username= '$username' and password='$password'";
echo $query."<br />";
[/code]

This is the query I am sending to the database all looks good as it is, but when I fill my login form in on my site I am left with this error

[code]
select username, userlevel from users where users.username= 'tom' and password='xxxxxx'

Unknown column 'tom' in 'where clause'
[/code]

My first thoughts was maybe I forgot the ' around my $username but they are there. re wrote the query a few times added things like trim() to the username just incease it was grabbing random white space from somewhere, but having no luck also changed my call from username to users.username and swapped the order it searches for the username and password, but always finds the problem with the username field.

if I am to use my echoed query into mysql through say zend, it returns the expected result

beginning to lose hair over this simple query, any help much appriciated

[Orio]

Try:
select username, userlevel from users where username= 'tom' and password='xxxxxx'

The only thing I dont get is- why do you pull the username from the database if you have "where username=..."  ?

Orio.

[AV1611]

$query = "select username, userlevel from users where `username` = '$username' and `password`='$password'";

[SetToLoki]

[quote author=Orio link=topic=115529.msg470499#msg470499 date=1163947065]
Try:
select username, userlevel from users where username= 'tom' and password='xxxxxx'

The only thing I dont get is- why do you pull the username from the database if you have "where username=..."  ?

Orio.
[/quote]

more trial and error stuff to see if it helped :D it didn't :(

[SetToLoki]

[quote author=AV1611 link=topic=115529.msg470531#msg470531 date=1163953271]
$query = "select username, userlevel from users where `username` = '$username' and `password`='$password'";

[/quote]

select username, userlevel from users where `username` = 'tom' and `password`='xiexiex'

Unknown column 'tom' in 'where clause'

still being buggy :(

[SetToLoki]

[code=php:0]
function Login()
{
  $form = '<div id="login" class="right_cont">
              <form action="%s" method="post" name="login">
  <h2>Login </h2>
                %s
                username<br />
  <input class="input" name="username" type="text" id="username" /><br />
  password<br />
  <input class="input" name="password" type="password" id="password" /><br />
  <input class="submit" name="submit" value="submit" type="submit" />
  <div id="reg"><a href="%s">Register</a> || <a href="">Lost Password</a></div>
  </div>';

if (!isset($_SESSION['user']))
  {
                    if (!isset($_POST['username']))
{
printf ($form, "","",$_SERVER['PHP_SELF'].'?p=register',"","");
}
if (isset($_POST['username']))
{
//First Time login details have been added
$username = trim($_POST['username']);
$password = md5($_POST['password']);

$query = "select username, userlevel from users where `username` = '$username' and `password`='$password'";
echo $query."<br />";
$res = mysql_query($query);
echo $res."<br />";
$count = mysql_num_rows($res);
if ($count == 1)
{
//succsesful match found log in
$res = mysql_fetch_array($res);
$_SESSION['user'] = $res['username'];
$_SESSION['userlevel'] = $res['userlevel'];

$query = sprintf("UPDATE users SET users.LastLogin = %s WHERE users.username = %s",date(Ymd),$_SESSION['user']);
mysql_query($query) or die(mysql_error());
}
else
{
//Login Failure
printf($form, "", "<p>Login Failed: please check your username and password are correct.</p>","","");
}
}
}
else
{
echo '<div id="login">You are logged in as <b>'.$_SESSION['user'].'</b></ br>
  <a href="'.$_SERVER['PHP_SELF'].'?p=profile">Edit Profile</a> || <a href="'.$_SERVER['PHP_SELF'].'?p=pref">My Personal Options</a> || <a href="'.$_SERVER['PHP_SELF'].'?p=logout">Logout</ a></div>';
}
}
[/code]

maybe the full function will spread mroe light?

[SetToLoki]

desperate bump

[taith]

[code]
select username, userlevel from users where users.username= 'tom' and password='xxxxxx'
Unknown column 'tom' in 'where clause'
[/code]

that is simply telling you that your mysql doesnt have a collumn named 'tom', get rid of the space seperating username= 'tom', that should fix it...

[SetToLoki]

[quote author=taith link=topic=115529.msg471347#msg471347 date=1164113043]
[code]
select username, userlevel from users where users.username= 'tom' and password='xxxxxx'
Unknown column 'tom' in 'where clause'
[/code]

that is simply telling you that your mysql doesnt have a collumn named 'tom', get rid of the space seperating username= 'tom', that should fix it...
[/quote]

one of my first thoughts, but doesn't seem to make a diffrence, I have even opened tutorials that do the same sort of thing and copied and pasted their code into my scrtiop, no matter what I do it always belives there should be a coloum with same name as $username,
if after running the script and getting the error I refrewsh or change page, I am logged in as I should be, so the script functions as it should, only it gives me an error,

[HuggieBear]

What happens if you use:

[code]SELECT username, userlevel FROM users WHERE username = 'tom' AND password = 'xxxxxx'[/code]

I just wondered why you're specifying the table in the WHERE clause?

Regards
Huggie

[AV1611]

Just for fun, do "select * from..." then printf the results

Curious...